Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CBD4656F9D811EBA2CCF604D8A014CE.roa
File: 7CBD4656F9D811EBA2CCF604D8A014CE.roa (raw, json)
Hash identifier: GJiVR54JjzrnUdD2Eu5ITPWdNm9PXadWfigmbT7poDI=
Subject key identifier: 8F:73:3D:C7:DB:8F:FE:65:9A:D1:71:6C:79:BC:C8:E2:74:CF:C5:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0871
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CBD4656F9D811EBA2CCF604D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:43:36 +0000
ROA not before: Tue 10 Aug 2021 12:43:32 +0000
ROA not after: Mon 10 Oct 2022 12:43:32 +0000
asID: 9009
IP address blocks: 45.192.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:43:32 2021 GMT
Not After : Oct 10 12:43:32 2022 GMT
Subject: CN=61127478-1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:8e:0d:18:32:a0:00:87:0c:71:9c:ca:8f:
13:4a:42:19:6e:08:2b:26:ae:04:b0:33:d0:53:54:
9a:ba:38:20:bc:92:ec:6f:2b:eb:66:42:b1:c5:d3:
a2:f5:d8:46:83:3a:70:3b:8b:8d:d2:8a:9b:0b:8c:
58:85:84:53:c3:42:ad:96:f3:2c:a0:ab:f1:24:c0:
57:d8:c6:48:13:a5:c8:50:fe:4c:a1:43:d0:7c:a9:
b7:ea:7d:43:5c:de:e7:f2:5f:23:da:20:a6:cd:00:
65:24:b9:63:3e:48:8c:d7:95:62:5a:38:cf:f6:db:
9e:ed:bb:df:68:06:68:24:f4:28:b9:9b:90:06:25:
ac:ca:96:10:bb:1b:b2:ee:7e:5d:75:56:38:e7:e3:
91:21:aa:69:42:2f:bd:84:3a:43:39:9f:7c:e7:a7:
35:c7:78:aa:5b:94:0b:98:b4:da:53:54:c7:bd:aa:
e6:88:0b:3e:c7:a4:bd:4b:1c:17:7e:2b:bd:06:58:
6c:cd:3f:84:8a:2b:8f:da:ba:d3:1e:78:7d:2b:a3:
3e:ce:bb:79:a4:cd:f4:e8:96:5b:19:9f:bc:7c:0e:
2d:4c:68:77:32:4c:21:3c:95:14:24:bd:6d:48:12:
66:b5:e1:50:f0:fb:c7:90:65:de:b6:ed:7d:81:c1:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:3D:C7:DB:8F:FE:65:9A:D1:71:6C:79:BC:C8:E2:74:CF:C5:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CBD4656F9D811EBA2CCF604D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
48:68:63:a3:cf:6a:47:ab:2e:2e:20:5e:e2:41:0a:aa:9c:73:
a2:2f:f3:d0:82:61:5f:f8:23:23:51:f8:db:e3:80:44:56:0b:
ee:c7:0d:ae:e8:28:f5:d2:55:55:ed:e7:5e:8a:25:16:72:c0:
05:e8:45:57:1c:f9:94:ac:d3:bf:a2:90:85:f8:49:0e:40:f2:
88:12:6f:59:94:c5:f6:5c:9f:f5:2a:af:25:64:e7:64:c5:9e:
47:92:73:da:e2:1b:17:b3:0b:78:08:a4:dc:1b:56:8e:49:ae:
40:19:2a:19:53:43:8b:6a:7a:41:29:fa:f3:86:29:16:dd:3e:
a7:b1:bc:59:26:31:44:bc:09:15:f8:32:2e:40:bb:3d:90:3b:
b7:f5:a9:f8:27:81:92:6f:72:ed:da:c2:4d:8b:d0:67:3f:1e:
bf:24:b9:ce:d4:3c:41:56:0c:24:14:c7:6e:9e:d2:ed:96:ce:
48:69:db:5b:9d:96:d1:54:ea:77:b4:41:9c:a0:d5:e4:f2:6b:
ba:87:fa:2a:51:5a:9e:d8:ff:13:73:12:46:af:ee:1d:78:63:
82:e8:cb:8e:79:79:50:4c:13:8c:71:f2:67:08:7a:8e:09:35:
22:c5:2a:7b:60:70:0b:6b:fa:5f:2e:bc:ef:40:0d:af:6c:04:
ed:12:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org